Reland "Reland "[recipes] Enable build sandboxing""

This reverts commit f92d8841c1774bcc776c9247797e639a7283b213.

Reason for revert: The issues caused by this CL were fixed by:
1. Removing usage of system python in the rust rbe determinism checker: https://fxrev.dev/728163
2. Correctly propagating exit codes from fint in dumb_init
3. Using shutil.which() to find the path of each necessary linux tool
   instead of hardcoding paths.

Original change's description:
> Revert "Reland "[recipes] Enable build sandboxing""
>
> This reverts commit ff64f187b089e79ed11b1fb8bb4797b711d64da6.
>
> Reason for revert: consistent fint exits 0 but emits failure summary, which recipes dislike, on core.x64-asan-rust_determinism e.g. go/bbid/8802459357972934657
>
> Original change's description:
> > Reland "[recipes] Enable build sandboxing"
> >
> > This reverts commit 55f452f2f565e84192c1cf79729ca33543f6b37c.
> >
> > Reason for revert: We will mount the checkout read-write until we find a way to accommodate affected test analysis.
> >
> > Original change's description:
> > > Revert "[recipes] Enable build sandboxing"
> > >
> > > This reverts commit 7f561dba7de9abad18aa8de9ab6e8144de395ed9.
> > >
> > > Reason for revert: Fint failures across all builders: https://chat.google.com/room/AAAABFiUm4o/CRZvOCF4T84
> > >
> > > Original change's description:
> > > > [recipes] Enable build sandboxing
> > > >
> > > > Starts running all fint commands (which invoke fuchsia builds) inside of
> > > > an nsjail sandbox.
> > > >
> > > > Bug: b/243608142
> > > > Change-Id: I44a84dd21af0a5753315031569960a2999bbce71
> > > > Reviewed-on: https://fuchsia-review.googlesource.com/c/infra/recipes/+/726050
> > > > Fuchsia-Auto-Submit: Anirudh Mathukumilli <rudymathu@google.com>
> > > > Reviewed-by: Oliver Newman <olivernewman@google.com>
> > > > Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com>
> > >
> > > Bug: b/243608142
> > > Change-Id: I5a35b9ef180568c2890886bb62c3761cbb0abebc
> > > No-Presubmit: true
> > > No-Tree-Checks: true
> > > No-Try: true
> > > Reviewed-on: https://fuchsia-review.googlesource.com/c/infra/recipes/+/727642
> > > Reviewed-by: RubberStamper 🤖 <android-build-ayeaye@system.gserviceaccount.com>
> > > Commit-Queue: Vinicius Felizardo <felizardo@google.com>
> >
> > Bug: b/243608142
> > Change-Id: I4bb59f7dfe6884276e5dea9d2c1a3ad1deda6087
> > Reviewed-on: https://fuchsia-review.googlesource.com/c/infra/recipes/+/727680
> > Reviewed-by: Oliver Newman <olivernewman@google.com>
> > Commit-Queue: Anirudh Mathukumilli <rudymathu@google.com>
> > Fuchsia-Auto-Submit: Anirudh Mathukumilli <rudymathu@google.com>
>
> Bug: b/243608142
> Change-Id: Ic4c650ba30fefbf41c92b0d9b57a1774dd59f18c
> No-Presubmit: true
> No-Tree-Checks: true
> No-Try: true
> Reviewed-on: https://fuchsia-review.googlesource.com/c/infra/recipes/+/727157
> Commit-Queue: Drew Fisher <zarvox@google.com>
> Reviewed-by: RubberStamper 🤖 <android-build-ayeaye@system.gserviceaccount.com>

Bug: b/243608142
Change-Id: Ica83f722a7ca2887ca8738dd9e600b856a429416
Reviewed-on: https://fuchsia-review.googlesource.com/c/infra/recipes/+/728202
Reviewed-by: Oliver Newman <olivernewman@google.com>
Commit-Queue: Anirudh Mathukumilli <rudymathu@google.com>
Fuchsia-Auto-Submit: Anirudh Mathukumilli <rudymathu@google.com>
diff --git a/recipe_modules/artifacts/tests/full.expected/basic.json b/recipe_modules/artifacts/tests/full.expected/basic.json
index 8799afc..a73d7e7 100644
--- a/recipe_modules/artifacts/tests/full.expected/basic.json
+++ b/recipe_modules/artifacts/tests/full.expected/basic.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"foo.cc\"\n}\nchanged_files {\n  path: \"bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"foo.cc\"\n}\nchanged_files {\n  path: \"bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"foo.cc\"\n}\nchanged_files {\n  path: \"bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"foo.cc\"\n}\nchanged_files {\n  path: \"bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/artifacts/tests/full.expected/build_cancelled.json b/recipe_modules/artifacts/tests/full.expected/build_cancelled.json
index 8b2cfaf..17f10f2 100644
--- a/recipe_modules/artifacts/tests/full.expected/build_cancelled.json
+++ b/recipe_modules/artifacts/tests/full.expected/build_cancelled.json
@@ -402,22 +402,734 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "name": "build.gn gen",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@",
@@ -728,12 +1440,45 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/artifacts/tests/full.expected/non_transient_failure.json b/recipe_modules/artifacts/tests/full.expected/non_transient_failure.json
index ead530d..563d3ec 100644
--- a/recipe_modules/artifacts/tests/full.expected/non_transient_failure.json
+++ b/recipe_modules/artifacts/tests/full.expected/non_transient_failure.json
@@ -402,22 +402,734 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "name": "build.gn gen",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@",
@@ -728,12 +1440,45 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/artifacts/tests/full.expected/timeout.json b/recipe_modules/artifacts/tests/full.expected/timeout.json
index 1837eb0..04d30bc 100644
--- a/recipe_modules/artifacts/tests/full.expected/timeout.json
+++ b/recipe_modules/artifacts/tests/full.expected/timeout.json
@@ -402,22 +402,734 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "name": "build.gn gen",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@",
@@ -728,12 +1440,45 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/artifacts/tests/full.expected/transient_failure.json b/recipe_modules/artifacts/tests/full.expected/transient_failure.json
index 85831cf..3a4e66e 100644
--- a/recipe_modules/artifacts/tests/full.expected/transient_failure.json
+++ b/recipe_modules/artifacts/tests/full.expected/transient_failure.json
@@ -402,22 +402,734 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "name": "build.gn gen",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@",
@@ -728,12 +1440,45 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/builder.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/__init__.py b/recipe_modules/build/__init__.py
index c924804..996b72c 100644
--- a/recipe_modules/build/__init__.py
+++ b/recipe_modules/build/__init__.py
@@ -14,6 +14,7 @@
     "fuchsia/goma",
     "fuchsia/gsutil",
     "fuchsia/macos_sdk",
+    "fuchsia/nsjail",
     "fuchsia/rbe",
     "fuchsia/recipe_testing",
     "fuchsia/reported_step",
diff --git a/recipe_modules/build/api.py b/recipe_modules/build/api.py
index 21be93e..c301d19 100644
--- a/recipe_modules/build/api.py
+++ b/recipe_modules/build/api.py
@@ -731,6 +731,7 @@
                 fint_path,
                 checkout.root_dir.join(fint_params_path),
                 context,
+                use_sandboxing=not self.m.platform.is_mac,
             )
 
             prepared_step = self.m.reported_step.prepare_step("gn_gen", step)
@@ -850,6 +851,16 @@
                 static_path=gn_results._fint_params_path,
                 context=context,
                 timeout=timeout_secs,
+                use_sandboxing=(
+                    # We don't use sandboxing when goma is enabled because:
+                    # 1. The location of the goma socket is dependent on the
+                    #    current user, which by design is not known inside the
+                    #    sandbox.
+                    # 2. Only the GCC builders utilize goma - everything else
+                    #    uses RBE directly, which we do run inside a sandbox.
+                    not gn_results.fint_set_artifacts.use_goma
+                    and not self.m.platform.is_mac
+                ),
             )
 
             prepared_step = self.m.reported_step.prepare_step("ninja", fint_build_step)
@@ -1063,9 +1074,12 @@
         static_path,
         context,
         timeout=None,
+        use_sandboxing=False,
         **kwargs,
     ):
         context_textproto = self.m.proto.encode(context, "TEXTPB")
+        context_path = self.m.path.mkstemp()
+        self.m.file.write_raw("write fint context", context_path, context_textproto)
         # TODO(fxbug.dev/101594): These should be configured higher in the
         # stack in one of {swarming_bot, bbagent, recipe_bootstrap}. Set them
         # here for now to unblock isolation work (b/234060366).
@@ -1078,39 +1092,97 @@
             "XDG_STATE_HOME",
         ]
         env = self.m.context.env
-        for env_var in xdg_env_vars:
-            env[env_var] = env.get("TMPDIR", str(self.m.path["cleanup"]))
-        with self.m.context(env=env):
-            step = self.m.step(
+        fint_cmd = [
+            fint_path,
+            command,
+            "-static",
+            static_path,
+            "-context",
+            context_path,
+        ]
+        if use_sandboxing:
+            self.m.file.ensure_directory(
+                "ensure build directory exists", context.build_dir
+            )
+            for env_var in xdg_env_vars:
+                env[env_var] = "$tmpdir"
+            step = self.m.nsjail.sandboxed_step(
                 step_name,
-                [
-                    fint_path,
-                    command,
-                    "-static",
-                    static_path,
-                    "-context",
-                    self.m.raw_io.input(context_textproto),
-                ],
+                fint_cmd,
+                env=env,
+                symlinks={
+                    # Ninja requires that it be able to run /bin/sh.
+                    "/bin/bash": "/bin/sh",
+                    # Symlinking /dev/fd to /proc/self/fd allows for shell redirection.
+                    "/proc/self/fd": "/dev/fd",
+                    # Makes writing to /dev/stdout work.
+                    "/proc/self/fd/1": "/dev/stdout",
+                },
+                ro_mounts=filter(
+                    # Filter out empty strings.
+                    lambda s: s,
+                    [
+                        context.clang_toolchain_dir,
+                        context.gcc_toolchain_dir,
+                        context.rust_toolchain_dir,
+                        str(context_path),
+                        str(fint_path),
+                        "/dev/zero",
+                        # TODO(rudymathu): The Android avbtool invokes openssl. It
+                        # would be nice if we could have it invoke a vendored
+                        # version instead, at which point we can remove this mount.
+                        "/usr/bin/openssl",
+                    ],
+                ),
+                rw_mounts=filter(
+                    # Filter out empty strings.
+                    lambda s: s,
+                    [
+                        # TODO(rudymathu): Move the checkout dir to readonly
+                        # mounts once we account for affected test analysis.
+                        context.checkout_dir,
+                        str(self.m.path["cache"]),
+                        context.artifact_dir,
+                        context.build_dir,
+                        "/dev/null",
+                        "/dev/urandom",
+                        env.get("RBE_socket_path"),
+                    ],
+                ),
+                use_linux_tools=True,
+                use_luci_git=True,
                 ok_ret="any",
                 timeout=timeout,
                 **kwargs,
             )
-            if step.retcode or step.exc_result.had_timeout:
-                step.presentation.status = self.m.step.FAILURE
-                step.presentation.properties[BUILD_FAILED_PROPERTY] = True
-            step.presentation.step_text = "run by `fint %s`" % command
-            step.presentation.logs["context.textproto"] = context_textproto
-            if step.exc_result.had_timeout:
-                timeout_string = "%d seconds" % timeout
-                if timeout > 60:
-                    timeout_string = "%d minutes" % (timeout / 60)
-
-                self.m.reported_step.upload(step_name, step)
-
-                raise self.m.step.StepFailure(
-                    "`%s` timed out after %s." % (step_name, timeout_string)
+        else:
+            for env_var in xdg_env_vars:
+                env[env_var] = env.get("TMPDIR", str(self.m.path["cleanup"]))
+            with self.m.context(env=env):
+                step = self.m.step(
+                    step_name,
+                    fint_cmd,
+                    ok_ret="any",
+                    timeout=timeout,
+                    **kwargs,
                 )
-            return step
+
+        if step.retcode or step.exc_result.had_timeout:
+            step.presentation.status = self.m.step.FAILURE
+            step.presentation.properties[BUILD_FAILED_PROPERTY] = True
+        step.presentation.step_text = "run by `fint %s`" % command
+        step.presentation.logs["context.textproto"] = context_textproto
+        if step.exc_result.had_timeout:
+            timeout_string = "%d seconds" % timeout
+            if timeout > 60:
+                timeout_string = "%d minutes" % (timeout / 60)
+
+            self.m.reported_step.upload(step_name, step)
+
+            raise self.m.step.StepFailure(
+                "`%s` timed out after %s." % (step_name, timeout_string)
+            )
+        return step
 
     def _upload_buildstats_output(
         self, gn_results, gcs_bucket, build_id, fint_build_artifacts
diff --git a/recipe_modules/build/tests/custom_toolchain.expected/default.json b/recipe_modules/build/tests/custom_toolchain.expected/default.json
index fde6f1c..c3ba1cb 100644
--- a/recipe_modules/build/tests/custom_toolchain.expected/default.json
+++ b/recipe_modules/build/tests/custom_toolchain.expected/default.json
@@ -660,22 +660,1244 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/custom/clang\"\ngcc_toolchain_dir: \"[START_DIR]/custom/gcc\"\nrust_toolchain_dir: \"[START_DIR]/custom/rust\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount_ro",
+      "[START_DIR]/custom/clang",
+      "--bindmount_ro",
+      "[START_DIR]/custom/gcc",
+      "--bindmount_ro",
+      "[START_DIR]/custom/rust",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/custom/clang\"\ngcc_toolchain_dir: \"[START_DIR]/custom/gcc\"\nrust_toolchain_dir: \"[START_DIR]/custom/rust\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1127,12 +2349,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/custom/clang\"\ngcc_toolchain_dir: \"[START_DIR]/custom/gcc\"\nrust_toolchain_dir: \"[START_DIR]/custom/rust\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/custom/clang\"\ngcc_toolchain_dir: \"[START_DIR]/custom/gcc\"\nrust_toolchain_dir: \"[START_DIR]/custom/rust\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/custom_toolchains.json b/recipe_modules/build/tests/full.expected/custom_toolchains.json
index 65e7003..6514297 100644
--- a/recipe_modules/build/tests/full.expected/custom_toolchains.json
+++ b/recipe_modules/build/tests/full.expected/custom_toolchains.json
@@ -311,21 +311,1201 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[CLEANUP]/clang_tmp_1\"\ngcc_toolchain_dir: \"[CLEANUP]/gcc_tmp_1\"\nrust_toolchain_dir: \"[CLEANUP]/rust_tmp_1\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount_ro",
+      "[CLEANUP]/clang_tmp_1",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/gcc_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/rust_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[CLEANUP]/clang_tmp_1\"\ngcc_toolchain_dir: \"[CLEANUP]/gcc_tmp_1\"\nrust_toolchain_dir: \"[CLEANUP]/rust_tmp_1\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -481,21 +1661,961 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[CLEANUP]/clang_tmp_1\"\ngcc_toolchain_dir: \"[CLEANUP]/gcc_tmp_1\"\nrust_toolchain_dir: \"[CLEANUP]/rust_tmp_1\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths (2).find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_4:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount_ro",
+      "[CLEANUP]/clang_tmp_1",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/gcc_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/rust_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_3",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[CLEANUP]/clang_tmp_1\"\ngcc_toolchain_dir: \"[CLEANUP]/gcc_tmp_1\"\nrust_toolchain_dir: \"[CLEANUP]/rust_tmp_1\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipe_modules/build/tests/full.expected/default.json b/recipe_modules/build/tests/full.expected/default.json
index d185245..c022613 100644
--- a/recipe_modules/build/tests/full.expected/default.json
+++ b/recipe_modules/build/tests/full.expected/default.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -528,12 +1702,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/default_cq.json b/recipe_modules/build/tests/full.expected/default_cq.json
index 251465f..6358543 100644
--- a/recipe_modules/build/tests/full.expected/default_cq.json
+++ b/recipe_modules/build/tests/full.expected/default_cq.json
@@ -264,21 +264,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -731,12 +1905,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/duplicate_tool.json b/recipe_modules/build/tests/full.expected/duplicate_tool.json
index 6ff3a0e..7ceea15 100644
--- a/recipe_modules/build/tests/full.expected/duplicate_tool.json
+++ b/recipe_modules/build/tests/full.expected/duplicate_tool.json
@@ -65,21 +65,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipe_modules/build/tests/full.expected/extract_artifacts.json b/recipe_modules/build/tests/full.expected/extract_artifacts.json
index bf18b02..838ee47 100644
--- a/recipe_modules/build/tests/full.expected/extract_artifacts.json
+++ b/recipe_modules/build/tests/full.expected/extract_artifacts.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -528,12 +1702,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/fint_build_failure.json b/recipe_modules/build/tests/full.expected/fint_build_failure.json
index 4047f2f..8af12bd 100644
--- a/recipe_modules/build/tests/full.expected/fint_build_failure.json
+++ b/recipe_modules/build/tests/full.expected/fint_build_failure.json
@@ -71,21 +71,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -532,12 +1706,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/fint_build_timeout.json b/recipe_modules/build/tests/full.expected/fint_build_timeout.json
index 9d824c0..e60e6b0 100644
--- a/recipe_modules/build/tests/full.expected/fint_build_timeout.json
+++ b/recipe_modules/build/tests/full.expected/fint_build_timeout.json
@@ -65,21 +65,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -526,12 +1700,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -595,7 +1814,6 @@
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
       "GOMA_USE_LOCAL": "False",
-      "HOME": "[CLEANUP]",
       "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
       "RBE_instance": "fake_rbe_instance",
       "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
@@ -607,12 +1825,7 @@
       "RBE_service": "remotebuildexecution.googleapis.com:443",
       "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
       "RBE_use_application_default_credentials": "False",
-      "RBE_use_gce_credentials": "True",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
+      "RBE_use_gce_credentials": "True"
     },
     "luci_context": {
       "realm": {
diff --git a/recipe_modules/build/tests/full.expected/fint_build_unexpected_failure_summary.json b/recipe_modules/build/tests/full.expected/fint_build_unexpected_failure_summary.json
index 58aa69a..8d6ef398 100644
--- a/recipe_modules/build/tests/full.expected/fint_build_unexpected_failure_summary.json
+++ b/recipe_modules/build/tests/full.expected/fint_build_unexpected_failure_summary.json
@@ -70,21 +70,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -531,12 +1705,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/fint_build_unrecognized_failure.json b/recipe_modules/build/tests/full.expected/fint_build_unrecognized_failure.json
index bd249a5..f0d24b7 100644
--- a/recipe_modules/build/tests/full.expected/fint_build_unrecognized_failure.json
+++ b/recipe_modules/build/tests/full.expected/fint_build_unrecognized_failure.json
@@ -68,21 +68,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -529,12 +1703,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/fint_set_failure.json b/recipe_modules/build/tests/full.expected/fint_set_failure.json
index 53c5ef4..0ead564 100644
--- a/recipe_modules/build/tests/full.expected/fint_set_failure.json
+++ b/recipe_modules/build/tests/full.expected/fint_set_failure.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipe_modules/build/tests/full.expected/fint_set_unexpected_failure_summary.json b/recipe_modules/build/tests/full.expected/fint_set_unexpected_failure_summary.json
index dccae05..a6daa93 100644
--- a/recipe_modules/build/tests/full.expected/fint_set_unexpected_failure_summary.json
+++ b/recipe_modules/build/tests/full.expected/fint_set_unexpected_failure_summary.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipe_modules/build/tests/full.expected/fint_set_unrecognized_failure.json b/recipe_modules/build/tests/full.expected/fint_set_unrecognized_failure.json
index c376b91..584bcfb 100644
--- a/recipe_modules/build/tests/full.expected/fint_set_unrecognized_failure.json
+++ b/recipe_modules/build/tests/full.expected/fint_set_unrecognized_failure.json
@@ -65,21 +65,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipe_modules/build/tests/full.expected/generate_skipped_shards.json b/recipe_modules/build/tests/full.expected/generate_skipped_shards.json
index 1b066cc..39f1712 100644
--- a/recipe_modules/build/tests/full.expected/generate_skipped_shards.json
+++ b/recipe_modules/build/tests/full.expected/generate_skipped_shards.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -528,12 +1702,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/incremental_build.json b/recipe_modules/build/tests/full.expected/incremental_build.json
index 308d254..03a7c29 100644
--- a/recipe_modules/build/tests/full.expected/incremental_build.json
+++ b/recipe_modules/build/tests/full.expected/incremental_build.json
@@ -127,21 +127,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -588,12 +1762,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/mac.json b/recipe_modules/build/tests/full.expected/mac.json
index 2cdf3b4..e0cb8ee 100644
--- a/recipe_modules/build/tests/full.expected/mac.json
+++ b/recipe_modules/build/tests/full.expected/mac.json
@@ -207,12 +207,41 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "env": {
       "HOME": "[CLEANUP]",
@@ -668,12 +697,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_2"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_2"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/ninjatrace_fails.json b/recipe_modules/build/tests/full.expected/ninjatrace_fails.json
index ad1b387..36d3439 100644
--- a/recipe_modules/build/tests/full.expected/ninjatrace_fails.json
+++ b/recipe_modules/build/tests/full.expected/ninjatrace_fails.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -528,12 +1702,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/no_fint_build_artifacts.json b/recipe_modules/build/tests/full.expected/no_fint_build_artifacts.json
index 12e4042..9695f33 100644
--- a/recipe_modules/build/tests/full.expected/no_fint_build_artifacts.json
+++ b/recipe_modules/build/tests/full.expected/no_fint_build_artifacts.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -528,12 +1702,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/no_fint_set_artifacts.json b/recipe_modules/build/tests/full.expected/no_fint_set_artifacts.json
index 0e0d1c0..91fa8ed 100644
--- a/recipe_modules/build/tests/full.expected/no_fint_set_artifacts.json
+++ b/recipe_modules/build/tests/full.expected/no_fint_set_artifacts.json
@@ -65,21 +65,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipe_modules/build/tests/full.expected/no_skip_for_integration_change.json b/recipe_modules/build/tests/full.expected/no_skip_for_integration_change.json
index 4776de0..f5543b1 100644
--- a/recipe_modules/build/tests/full.expected/no_skip_for_integration_change.json
+++ b/recipe_modules/build/tests/full.expected/no_skip_for_integration_change.json
@@ -264,21 +264,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -639,12 +1813,45 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/no_skip_if_recipe_testing_enabled.json b/recipe_modules/build/tests/full.expected/no_skip_if_recipe_testing_enabled.json
index c7b9a23..02645e9 100644
--- a/recipe_modules/build/tests/full.expected/no_skip_if_recipe_testing_enabled.json
+++ b/recipe_modules/build/tests/full.expected/no_skip_if_recipe_testing_enabled.json
@@ -264,21 +264,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -639,12 +1813,45 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/release_with_signature.json b/recipe_modules/build/tests/full.expected/release_with_signature.json
index 86eb3a2..e3c328e 100644
--- a/recipe_modules/build/tests/full.expected/release_with_signature.json
+++ b/recipe_modules/build/tests/full.expected/release_with_signature.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.19700101.0.77\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.19700101.0.77\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -529,12 +1703,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.19700101.0.77\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.19700101.0.77\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/release_with_version.json b/recipe_modules/build/tests/full.expected/release_with_version.json
index 7e04326..40c27e5 100644
--- a/recipe_modules/build/tests/full.expected/release_with_version.json
+++ b/recipe_modules/build/tests/full.expected/release_with_version.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.19700101.0.77\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.19700101.0.77\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -529,12 +1703,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.19700101.0.77\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.19700101.0.77\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/size_creep_label_not_approved.json b/recipe_modules/build/tests/full.expected/size_creep_label_not_approved.json
index b51809f..990092c 100644
--- a/recipe_modules/build/tests/full.expected/size_creep_label_not_approved.json
+++ b/recipe_modules/build/tests/full.expected/size_creep_label_not_approved.json
@@ -264,21 +264,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -731,12 +1905,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/skip_if_unaffected.json b/recipe_modules/build/tests/full.expected/skip_if_unaffected.json
index abc95c3..1453b78 100644
--- a/recipe_modules/build/tests/full.expected/skip_if_unaffected.json
+++ b/recipe_modules/build/tests/full.expected/skip_if_unaffected.json
@@ -261,21 +261,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
diff --git a/recipe_modules/build/tests/full.expected/subbuild.json b/recipe_modules/build/tests/full.expected/subbuild.json
index 99e5ac0..417ef49 100644
--- a/recipe_modules/build/tests/full.expected/subbuild.json
+++ b/recipe_modules/build/tests/full.expected/subbuild.json
@@ -67,21 +67,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -528,12 +1702,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/build/tests/full.expected/upload_buildstats_failure.json b/recipe_modules/build/tests/full.expected/upload_buildstats_failure.json
index 6e6f6c2..37e594e 100644
--- a/recipe_modules/build/tests/full.expected/upload_buildstats_failure.json
+++ b/recipe_modules/build/tests/full.expected/upload_buildstats_failure.json
@@ -68,21 +68,1195 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/out/not-default"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -529,12 +1703,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/infra/specs/fint-params.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]\"\nbuild_dir: \"[START_DIR]/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/nsjail/api.py b/recipe_modules/nsjail/api.py
index 0d4e5e8..b0aee2b 100644
--- a/recipe_modules/nsjail/api.py
+++ b/recipe_modules/nsjail/api.py
@@ -11,7 +11,7 @@
     def __init__(self, api, bin_path, dumb_init_path):
         self._api = api
 
-        self._path = None
+        self._path = ""
         self._bin_path = bin_path
         self._dumb_init_path = str(dumb_init_path)
         self._ro_mounts = [self._dumb_init_path]
@@ -151,49 +151,73 @@
         Adds a set of linux tools we expect most programs in infra to use.
         """
         tools = [
+            "awk",
+            "basename",
+            "cat",
+            "chmod",
+            "cmp",
+            "comm",
+            "cp",
+            "cut",
+            "diff",
+            "dirname",
+            "egrep",
+            "env",
+            "expr",
+            "find",
+            "grep",
+            "gzip",
+            "head",
+            "ldd",
+            "ls",
+            "mkdir",
+            "mktemp",
+            "readlink",
+            "rm",
+            "sed",
+            "sort",
+            "tail",
+            "tar",
+            "tee",
+            "touch",
+            "tr",
+            "uname",
+            "wc",
+            "which",
+        ]
+        mounts = [
+            # We special case bash here because the fuchsia build often hardcodes
+            # /bin/bash in shebangs.
             "/bin/bash",
-            "/usr/bin/awk",
-            "/usr/bin/basename",
-            "/usr/bin/cat",
-            "/usr/bin/chmod",
-            "/usr/bin/cmp",
-            "/usr/bin/comm",
-            "/usr/bin/cp",
-            "/usr/bin/cut",
-            "/usr/bin/diff",
-            "/usr/bin/dirname",
-            "/usr/bin/egrep",
-            "/usr/bin/env",
-            "/usr/bin/expr",
-            "/usr/bin/find",
-            "/usr/bin/grep",
-            "/usr/bin/gzip",
-            "/usr/bin/head",
-            "/usr/bin/ldd",
-            "/usr/bin/ls",
-            "/usr/bin/mkdir",
-            "/usr/bin/mktemp",
-            "/usr/bin/readlink",
-            "/usr/bin/rm",
-            "/usr/bin/sed",
-            "/usr/bin/sort",
-            "/usr/bin/tail",
-            "/usr/bin/tar",
-            "/usr/bin/tee",
-            "/usr/bin/touch",
-            "/usr/bin/tr",
-            "/usr/bin/uname",
-            "/usr/bin/wc",
-            "/usr/bin/which",
             # These are required for bash to work.
             "/lib",
             "/lib64",
         ]
-        self.add_ro_mounts(tools)
+        # The set of directories to add to PATH.
+        path_additions = {"/bin": True}
+        with self._api.step.nest("find tool paths"):
+            for tool in tools:
+                tool_path = self._find_abs_path(tool)
+                if tool_path:
+                    mounts.append(tool_path)
+                    path_additions[self._api.path.dirname(tool_path)] = True
 
-        # Add these tools to PATH.
-        self._prepend_to_path("/bin")
-        self._prepend_to_path("/usr/bin")
+        self.add_ro_mounts(mounts)
+
+        # Sort and add all path additions.
+        paths = sorted(path_additions.keys())
+        for p in paths:
+            self._prepend_to_path(p)
+
+    def _find_abs_path(self, tool):
+        return self._api.step(
+            "find absolute path of %s" % tool,
+            ["which", tool],
+            stdout=self._api.raw_io.output_text(),
+            step_test_data=lambda: self._api.raw_io.test_api.stream_output_text(
+                "/usr/bin/%s" % tool
+            ),
+        ).stdout.strip()
 
 
 class NsjailApi(recipe_api.RecipeApi):
diff --git a/recipe_modules/nsjail/tests/full.expected/default.json b/recipe_modules/nsjail/tests/full.expected/default.json
index 5473387..a3b0684 100644
--- a/recipe_modules/nsjail/tests/full.expected/default.json
+++ b/recipe_modules/nsjail/tests/full.expected/default.json
@@ -162,6 +162,340 @@
     ]
   },
   {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
     "cmd": [
       "which",
       "-a",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/black.json b/recipe_modules/tricium_analyze/tests/full.expected/black.json
index db69db3..1bdfa85 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/black.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/black.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/clang_format.json b/recipe_modules/tricium_analyze/tests/full.expected/clang_format.json
index 8695fa2..4c57ab1 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/clang_format.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/clang_format.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy.json b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy.json
index 59668b4..64d83f5 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_bad_offset.json b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_bad_offset.json
index e1b00f4..b23cb54 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_bad_offset.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_bad_offset.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_error.json b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_error.json
index 2f1a5ef..d7008b5 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_error.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_error.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/cmc.json b/recipe_modules/tricium_analyze/tests/full.expected/cmc.json
index 9870c2b..c8f46f7 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/cmc.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/cmc.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/dart_format.json b/recipe_modules/tricium_analyze/tests/full.expected/dart_format.json
index ad03f83..e17aa2b 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/dart_format.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/dart_format.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/fidl_format.json b/recipe_modules/tricium_analyze/tests/full.expected/fidl_format.json
index 8b77710..1f344b9 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/fidl_format.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/fidl_format.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/fidl_lint.json b/recipe_modules/tricium_analyze/tests/full.expected/fidl_lint.json
index a770cf3..c7e3440 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/fidl_lint.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/fidl_lint.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/gn_format.json b/recipe_modules/tricium_analyze/tests/full.expected/gn_format.json
index 7f854b7..78dd2a4 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/gn_format.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/gn_format.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/go_vet.json b/recipe_modules/tricium_analyze/tests/full.expected/go_vet.json
index ed79b75..5d93b04 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/go_vet.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/go_vet.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/go_vet_build_fails.json b/recipe_modules/tricium_analyze/tests/full.expected/go_vet_build_fails.json
index e055b50..131f299 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/go_vet_build_fails.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/go_vet_build_fails.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/go_vet_no_warnings.json b/recipe_modules/tricium_analyze/tests/full.expected/go_vet_no_warnings.json
index eb7c64b..6b62e53 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/go_vet_no_warnings.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/go_vet_no_warnings.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/gofmt.json b/recipe_modules/tricium_analyze/tests/full.expected/gofmt.json
index e216c2c..0dc7e15 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/gofmt.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/gofmt.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/json5.json b/recipe_modules/tricium_analyze/tests/full.expected/json5.json
index 01e3df7..bbea4a1 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/json5.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/json5.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/mdlint.json b/recipe_modules/tricium_analyze/tests/full.expected/mdlint.json
index 8b1c908..2e2e774 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/mdlint.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/mdlint.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/no_analysis.json b/recipe_modules/tricium_analyze/tests/full.expected/no_analysis.json
index a4a3954..9e4a9e3 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/no_analysis.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/no_analysis.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/no_commit_message.json b/recipe_modules/tricium_analyze/tests/full.expected/no_commit_message.json
index ca71571..46bc90f 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/no_commit_message.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/no_commit_message.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/no_commit_tag.json b/recipe_modules/tricium_analyze/tests/full.expected/no_commit_tag.json
index 9e26af7..cd0dbdb 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/no_commit_tag.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/no_commit_tag.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/non_inclusive_word.json b/recipe_modules/tricium_analyze/tests/full.expected/non_inclusive_word.json
index 02b33bc..0f875d6 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/non_inclusive_word.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/non_inclusive_word.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/rustfmt.json b/recipe_modules/tricium_analyze/tests/full.expected/rustfmt.json
index ee149c5..274d23a 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/rustfmt.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/rustfmt.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/staticlints.json b/recipe_modules/tricium_analyze/tests/full.expected/staticlints.json
index e7d05f5..bdcef9e 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/staticlints.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/staticlints.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/staticlints_failure.json b/recipe_modules/tricium_analyze/tests/full.expected/staticlints_failure.json
index 59cd9bc..1ec1634 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/staticlints_failure.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/staticlints_failure.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/valid_commit_tag.json b/recipe_modules/tricium_analyze/tests/full.expected/valid_commit_tag.json
index a4a3954..9e4a9e3 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/valid_commit_tag.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/valid_commit_tag.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/yapf.json b/recipe_modules/tricium_analyze/tests/full.expected/yapf.json
index b82d35e..b5511c8 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/yapf.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/yapf.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/yapf_no_fx.json b/recipe_modules/tricium_analyze/tests/full.expected/yapf_no_fx.json
index 4f5baf5..3836f59 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/yapf_no_fx.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/yapf_no_fx.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/checkout/out/not-default"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/checkout",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount",
+      "[START_DIR]/checkout",
+      "--bindmount",
+      "[START_DIR]/checkout/out/not-default",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/checkout",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/checkout/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/checkout\"\nbuild_dir: \"[START_DIR]/checkout/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/cobalt_config.expected/ci.json b/recipes/cobalt_config.expected/ci.json
index 7769719..0fed429 100644
--- a/recipes/cobalt_config.expected/ci.json
+++ b/recipes/cobalt_config.expected/ci.json
@@ -747,22 +747,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/foo/cobalt_config.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1211,12 +2427,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/foo/cobalt_config.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/cobalt_config.expected/cq_try.json b/recipes/cobalt_config.expected/cq_try.json
index dadbcc3..794ce04 100644
--- a/recipes/cobalt_config.expected/cq_try.json
+++ b/recipes/cobalt_config.expected/cq_try.json
@@ -1141,22 +1141,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"cobalt-registry/foo.cc\"\n}\nchanged_files {\n  path: \"cobalt-registry/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/foo/cobalt_config.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"cobalt-registry/foo.cc\"\n}\nchanged_files {\n  path: \"cobalt-registry/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1611,12 +2827,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"cobalt-registry/foo.cc\"\n}\nchanged_files {\n  path: \"cobalt-registry/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/foo/cobalt_config.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"cobalt-registry/foo.cc\"\n}\nchanged_files {\n  path: \"cobalt-registry/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/cobalt_config.expected/cq_try_not_cobalt_config.json b/recipes/cobalt_config.expected/cq_try_not_cobalt_config.json
index d18e168..e0b67e6 100644
--- a/recipes/cobalt_config.expected/cq_try_not_cobalt_config.json
+++ b/recipes/cobalt_config.expected/cq_try_not_cobalt_config.json
@@ -1141,22 +1141,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"cobalt/foo.cc\"\n}\nchanged_files {\n  path: \"cobalt/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/foo/cobalt_config.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"cobalt/foo.cc\"\n}\nchanged_files {\n  path: \"cobalt/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1611,12 +2827,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"cobalt/foo.cc\"\n}\nchanged_files {\n  path: \"cobalt/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/foo/cobalt_config.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"cobalt/foo.cc\"\n}\nchanged_files {\n  path: \"cobalt/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/clang_ml_training.expected/bootstrap.json b/recipes/contrib/clang_ml_training.expected/bootstrap.json
index 6eaafad..fa473a9 100644
--- a/recipes/contrib/clang_ml_training.expected/bootstrap.json
+++ b/recipes/contrib/clang_ml_training.expected/bootstrap.json
@@ -2393,22 +2393,1240 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/arm64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/arm64"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "corpus.arm64.build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "corpus.arm64.build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "corpus.arm64.build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "corpus.arm64.build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "corpus.arm64.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount_ro",
+      "[START_DIR]/clang",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/arm64",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/clang-ml-training-arm64.fint.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/arm64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:prod"
@@ -2858,12 +4076,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/arm64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.arm64.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/clang-ml-training-arm64.fint.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/arm64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -4263,22 +5526,994 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/x64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_2\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_4"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/x64"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "corpus.x64.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_5:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_2",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_4",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount_ro",
+      "[START_DIR]/clang",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/x64",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/clang-ml-training-x64.fint.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/x64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_2\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:prod"
@@ -4572,12 +6807,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/x64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_2\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_6"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "corpus.x64.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/clang-ml-training-x64.fint.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/x64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_2\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_6"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/clang_ml_training.expected/generate.json b/recipes/contrib/clang_ml_training.expected/generate.json
index 1f621f8..8150da2 100644
--- a/recipes/contrib/clang_ml_training.expected/generate.json
+++ b/recipes/contrib/clang_ml_training.expected/generate.json
@@ -3808,22 +3808,1240 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/arm64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/arm64"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "evaluate.fuchsia.arm64.build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "evaluate.fuchsia.arm64.build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@6@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@6@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "evaluate.fuchsia.arm64.build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "evaluate.fuchsia.arm64.build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@6@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@6@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "evaluate.fuchsia.arm64.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount_ro",
+      "[START_DIR]/clang",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/arm64",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/clang-ml-training-arm64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/arm64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:prod"
@@ -4273,12 +5491,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/arm64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.arm64.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/clang-ml-training-arm64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/arm64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -5585,22 +6848,994 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/x64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_2\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_4"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/x64"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "evaluate.fuchsia.x64.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@5@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_5:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_2",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_4",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount_ro",
+      "[START_DIR]/clang",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/x64",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/clang-ml-training-x64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/x64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_2\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:prod"
@@ -5894,12 +8129,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/x64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_2\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_6"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:prod"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "evaluate.fuchsia.x64.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/clang-ml-training-x64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/x64\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_2\"\ncache_dir: \"[CACHE]\"\nclang_toolchain_dir: \"[START_DIR]/clang\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_6"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/docsgen.expected/basic.json b/recipes/contrib/docsgen.expected/basic.json
index ae0b4b5..24e19c1 100644
--- a/recipes/contrib/docsgen.expected/basic.json
+++ b/recipes/contrib/docsgen.expected/basic.json
@@ -660,22 +660,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/docsgen.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1124,12 +2340,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/docsgen.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/docsgen.expected/dryrun.json b/recipes/contrib/docsgen.expected/dryrun.json
index 2732a1e..7c24dca 100644
--- a/recipes/contrib/docsgen.expected/dryrun.json
+++ b/recipes/contrib/docsgen.expected/dryrun.json
@@ -660,22 +660,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/docsgen.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1124,12 +2340,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/docsgen.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/docsgen.expected/existing_release_branch.json b/recipes/contrib/docsgen.expected/existing_release_branch.json
index be6c92b..d07d6a2 100644
--- a/recipes/contrib/docsgen.expected/existing_release_branch.json
+++ b/recipes/contrib/docsgen.expected/existing_release_branch.json
@@ -704,22 +704,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"5.20210102.3.1\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/docsgen.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"5.20210102.3.1\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1169,12 +2385,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"5.20210102.3.1\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/docsgen.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"5.20210102.3.1\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/docsgen.expected/new_release_branch.json b/recipes/contrib/docsgen.expected/new_release_branch.json
index 78d56f3..fd4752c 100644
--- a/recipes/contrib/docsgen.expected/new_release_branch.json
+++ b/recipes/contrib/docsgen.expected/new_release_branch.json
@@ -704,22 +704,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"5.20210102.3.1\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/docsgen.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"5.20210102.3.1\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1169,12 +2385,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"5.20210102.3.1\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/docsgen.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"5.20210102.3.1\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/ffmpeg.expected/cq.json b/recipes/contrib/ffmpeg.expected/cq.json
index 6a2f9d6..58eb1a9 100644
--- a/recipes/contrib/ffmpeg.expected/cq.json
+++ b/recipes/contrib/ffmpeg.expected/cq.json
@@ -1059,22 +1059,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/ffmpeg/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/ffmpeg/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/ffmpeg-arm64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/ffmpeg/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/ffmpeg/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1529,12 +2745,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/ffmpeg/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/ffmpeg/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/ffmpeg-arm64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/ffmpeg/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/ffmpeg/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -3403,22 +4664,992 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/ffmpeg/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/ffmpeg/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_4"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "x64.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_5:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_4",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/ffmpeg-x64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/ffmpeg/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/ffmpeg/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -3717,12 +5948,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/ffmpeg/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/ffmpeg/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_6"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/ffmpeg-x64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/ffmpeg/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/ffmpeg/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_6"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/ffmpeg.expected/default.json b/recipes/contrib/ffmpeg.expected/default.json
index 1ce84d3..292c049 100644
--- a/recipes/contrib/ffmpeg.expected/default.json
+++ b/recipes/contrib/ffmpeg.expected/default.json
@@ -665,22 +665,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/ffmpeg-arm64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1129,12 +2345,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/ffmpeg-arm64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -2993,22 +4254,992 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_4"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "x64.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_5:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_4",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/ffmpeg-x64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -3301,12 +5532,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_6"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/ffmpeg-x64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_6"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/firebase_docs.expected/firebase_docs.json b/recipes/contrib/firebase_docs.expected/firebase_docs.json
index dda51a8..f1437d7 100644
--- a/recipes/contrib/firebase_docs.expected/firebase_docs.json
+++ b/recipes/contrib/firebase_docs.expected/firebase_docs.json
@@ -1337,22 +1337,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/firebase-docs.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1801,12 +3017,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/firebase-docs.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/firebase_docs.expected/firebase_docs_failing_rustdoc.json b/recipes/contrib/firebase_docs.expected/firebase_docs_failing_rustdoc.json
index 4b30af2..457d78c 100644
--- a/recipes/contrib/firebase_docs.expected/firebase_docs_failing_rustdoc.json
+++ b/recipes/contrib/firebase_docs.expected/firebase_docs_failing_rustdoc.json
@@ -1337,22 +1337,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/firebase-docs.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1801,12 +3017,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/firebase-docs.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/kythe.expected/basic.json b/recipes/contrib/kythe.expected/basic.json
index 5187ad3..250fb74 100644
--- a/recipes/contrib/kythe.expected/basic.json
+++ b/recipes/contrib/kythe.expected/basic.json
@@ -660,22 +660,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/kythe.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1124,12 +2340,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/kythe.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/kythe.expected/try.json b/recipes/contrib/kythe.expected/try.json
index ad3dc59..353ce0a 100644
--- a/recipes/contrib/kythe.expected/try.json
+++ b/recipes/contrib/kythe.expected/try.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/kythe.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/kythe.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/contrib/linux_sysroot.expected/basic.json b/recipes/contrib/linux_sysroot.expected/basic.json
index ef2fa80..19a311f 100644
--- a/recipes/contrib/linux_sysroot.expected/basic.json
+++ b/recipes/contrib/linux_sysroot.expected/basic.json
@@ -660,22 +660,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/linux-sysroot.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1124,12 +2340,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/linux-sysroot.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/cts_artifacts.expected/canary.json b/recipes/cts_artifacts.expected/canary.json
index 0e7a1d5..9f81f8c 100644
--- a/recipes/cts_artifacts.expected/canary.json
+++ b/recipes/cts_artifacts.expected/canary.json
@@ -684,22 +684,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"5.20210102.3.1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/cts-artifacts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"5.20210102.3.1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1149,12 +2365,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"5.20210102.3.1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/cts-artifacts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"5.20210102.3.1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/cts_artifacts.expected/ci.json b/recipes/cts_artifacts.expected/ci.json
index b2a785b..ac6c8f8 100644
--- a/recipes/cts_artifacts.expected/ci.json
+++ b/recipes/cts_artifacts.expected/ci.json
@@ -660,22 +660,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/cts-artifacts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1124,12 +2340,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/cts-artifacts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/cts_artifacts.expected/cq.json b/recipes/cts_artifacts.expected/cq.json
index 5e96e47..74bd002 100644
--- a/recipes/cts_artifacts.expected/cq.json
+++ b/recipes/cts_artifacts.expected/cq.json
@@ -1054,22 +1054,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/cts-artifacts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1524,12 +2740,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/cts-artifacts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/cts_artifacts.expected/milestone.json b/recipes/cts_artifacts.expected/milestone.json
index 83d801c..890932e 100644
--- a/recipes/cts_artifacts.expected/milestone.json
+++ b/recipes/cts_artifacts.expected/milestone.json
@@ -684,22 +684,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"5.20210102.3.1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/cts-artifacts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"5.20210102.3.1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1149,12 +2365,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"5.20210102.3.1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/cts-artifacts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"5.20210102.3.1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/docs_roller.expected/basic.json b/recipes/docs_roller.expected/basic.json
index c5b9d03..484c514 100644
--- a/recipes/docs_roller.expected/basic.json
+++ b/recipes/docs_roller.expected/basic.json
@@ -697,22 +697,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "arm64.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "arm64.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/docs-roller-arm64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -880,22 +2096,992 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "x64.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "x64.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_4:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_3",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/docs-roller-x64.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/fuchsia/build.expected/affected_tests_no_work.json b/recipes/fuchsia/build.expected/affected_tests_no_work.json
index 2c4c351..6055f8e 100644
--- a/recipes/fuchsia/build.expected/affected_tests_no_work.json
+++ b/recipes/fuchsia/build.expected/affected_tests_no_work.json
@@ -1464,22 +1464,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1934,12 +3150,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/catapult_dashboard_upload_enabled.json b/recipes/fuchsia/build.expected/catapult_dashboard_upload_enabled.json
index 0bfc3cc..fc88f5e 100644
--- a/recipes/fuchsia/build.expected/catapult_dashboard_upload_enabled.json
+++ b/recipes/fuchsia/build.expected/catapult_dashboard_upload_enabled.json
@@ -1027,22 +1027,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1491,12 +2707,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/collect_absolute_coverage.json b/recipes/fuchsia/build.expected/collect_absolute_coverage.json
index 0e4b9fc..91b328f 100644
--- a/recipes/fuchsia/build.expected/collect_absolute_coverage.json
+++ b/recipes/fuchsia/build.expected/collect_absolute_coverage.json
@@ -1458,22 +1458,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1928,12 +3144,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/collect_selective_coverage.json b/recipes/fuchsia/build.expected/collect_selective_coverage.json
index e926ab5..827b445 100644
--- a/recipes/fuchsia/build.expected/collect_selective_coverage.json
+++ b/recipes/fuchsia/build.expected/collect_selective_coverage.json
@@ -1458,22 +1458,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ncollect_coverage: true\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ncollect_coverage: true\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1929,12 +3145,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ncollect_coverage: true\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ncollect_coverage: true\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/cq_perfcompare.json b/recipes/fuchsia/build.expected/cq_perfcompare.json
index b813b37..de9c624 100644
--- a/recipes/fuchsia/build.expected/cq_perfcompare.json
+++ b/recipes/fuchsia/build.expected/cq_perfcompare.json
@@ -1480,22 +1480,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/example_repo/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/example_repo/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/example_repo/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/example_repo/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1950,12 +3166,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/example_repo/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/example_repo/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/example_repo/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/example_repo/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -4794,22 +6055,992 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/example_repo/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/example_repo/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_4"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build without CL.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_5:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_4",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/example_repo/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/example_repo/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -5108,12 +7339,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/example_repo/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/example_repo/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\nskip_ninja_noop_check: true\n",
+      "[CLEANUP]/tmp_tmp_6"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build without CL.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"third_party/example_repo/foo.cc\"\n}\nchanged_files {\n  path: \"third_party/example_repo/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\nskip_ninja_noop_check: true\n"
+      "[CLEANUP]/tmp_tmp_6"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/default.json b/recipes/fuchsia/build.expected/default.json
index a7fd367..046b548 100644
--- a/recipes/fuchsia/build.expected/default.json
+++ b/recipes/fuchsia/build.expected/default.json
@@ -1025,22 +1025,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1401,12 +2617,45 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/default_cq.json b/recipes/fuchsia/build.expected/default_cq.json
index 04069f9..45da0ec 100644
--- a/recipes/fuchsia/build.expected/default_cq.json
+++ b/recipes/fuchsia/build.expected/default_cq.json
@@ -1469,22 +1469,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1939,12 +3155,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/default_cq_no_affected_retry_task_on_test_failure.json b/recipes/fuchsia/build.expected/default_cq_no_affected_retry_task_on_test_failure.json
index f3dea19..d3d56bc 100644
--- a/recipes/fuchsia/build.expected/default_cq_no_affected_retry_task_on_test_failure.json
+++ b/recipes/fuchsia/build.expected/default_cq_no_affected_retry_task_on_test_failure.json
@@ -1466,22 +1466,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1936,12 +3152,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/default_multipliers.json b/recipes/fuchsia/build.expected/default_multipliers.json
index f18451c..a462d3b 100644
--- a/recipes/fuchsia/build.expected/default_multipliers.json
+++ b/recipes/fuchsia/build.expected/default_multipliers.json
@@ -1565,22 +1565,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "integration:try"
@@ -2035,12 +3251,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/failed_build_cq.json b/recipes/fuchsia/build.expected/failed_build_cq.json
index 23b89b5..5be082d 100644
--- a/recipes/fuchsia/build.expected/failed_build_cq.json
+++ b/recipes/fuchsia/build.expected/failed_build_cq.json
@@ -1455,22 +1455,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1925,12 +3141,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/non_numeric_parent_id.json b/recipes/fuchsia/build.expected/non_numeric_parent_id.json
index bb7e772..5f13671 100644
--- a/recipes/fuchsia/build.expected/non_numeric_parent_id.json
+++ b/recipes/fuchsia/build.expected/non_numeric_parent_id.json
@@ -1025,22 +1025,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1489,12 +2705,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/run_all_tests.json b/recipes/fuchsia/build.expected/run_all_tests.json
index 088582b..45a722d 100644
--- a/recipes/fuchsia/build.expected/run_all_tests.json
+++ b/recipes/fuchsia/build.expected/run_all_tests.json
@@ -1556,22 +1556,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "integration:try"
@@ -1934,12 +3150,45 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "integration:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/sdk.json b/recipes/fuchsia/build.expected/sdk.json
index 23e127a..19da835 100644
--- a/recipes/fuchsia/build.expected/sdk.json
+++ b/recipes/fuchsia/build.expected/sdk.json
@@ -1055,22 +1055,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.20191018.0.1\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.20191018.0.1\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1521,12 +2737,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.20191018.0.1\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nsdk_id: \"sdk-id\"\ncache_dir: \"[CACHE]\"\nrelease_version: \"0.20191018.0.1\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/build.expected/skip_if_unaffected.json b/recipes/fuchsia/build.expected/skip_if_unaffected.json
index 7615b05..b0842d1 100644
--- a/recipes/fuchsia/build.expected/skip_if_unaffected.json
+++ b/recipes/fuchsia/build.expected/skip_if_unaffected.json
@@ -1462,22 +1462,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
diff --git a/recipes/fuchsia/build.expected/test_on_gce.json b/recipes/fuchsia/build.expected/test_on_gce.json
index 8954766..0c024d8 100644
--- a/recipes/fuchsia/build.expected/test_on_gce.json
+++ b/recipes/fuchsia/build.expected/test_on_gce.json
@@ -955,22 +955,1196 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": ":"
@@ -1391,12 +2565,56 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": ":"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/fuchsia/coverage.expected/collect_absolute.json b/recipes/fuchsia/coverage.expected/collect_absolute.json
index 5efabee..e093e73 100644
--- a/recipes/fuchsia/coverage.expected/collect_absolute.json
+++ b/recipes/fuchsia/coverage.expected/collect_absolute.json
@@ -1207,22 +1207,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1993,7 +3191,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863184/build-ids.json",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "infra_step": true,
     "luci_context": {
@@ -2018,7 +3216,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1",
+      "[CLEANUP]/tmp_tmp_3",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -2036,11 +3234,11 @@
     },
     "name": "read build-ids.json",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_1@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_1@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_3@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_3@@@"
     ]
   },
   {
diff --git a/recipes/fuchsia/coverage.expected/default.json b/recipes/fuchsia/coverage.expected/default.json
index b941f80..8a49932 100644
--- a/recipes/fuchsia/coverage.expected/default.json
+++ b/recipes/fuchsia/coverage.expected/default.json
@@ -810,22 +810,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1633,7 +2831,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863184/build-ids.json",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1658,7 +2856,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1",
+      "[CLEANUP]/tmp_tmp_3",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1676,11 +2874,11 @@
     },
     "name": "read build-ids.json",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_1@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_1@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_3@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_3@@@"
     ]
   },
   {
@@ -1716,7 +2914,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863185/build-ids.json",
-      "[CLEANUP]/tmp_tmp_2"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1741,7 +2939,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_2",
+      "[CLEANUP]/tmp_tmp_4",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1759,11 +2957,11 @@
     },
     "name": "read build-ids.json (2)",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_2@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_2@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_4@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_4@@@"
     ]
   },
   {
diff --git a/recipes/fuchsia/coverage.expected/default_cts.json b/recipes/fuchsia/coverage.expected/default_cts.json
index b4a7916..e8b5871 100644
--- a/recipes/fuchsia/coverage.expected/default_cts.json
+++ b/recipes/fuchsia/coverage.expected/default_cts.json
@@ -810,22 +810,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1666,7 +2864,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863184/build-ids.json",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1691,7 +2889,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1",
+      "[CLEANUP]/tmp_tmp_3",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1709,11 +2907,11 @@
     },
     "name": "read build-ids.json",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_1@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_1@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_3@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_3@@@"
     ]
   },
   {
@@ -1726,7 +2924,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863184/fidl_mangled_to_api_mapping.json",
-      "[CLEANUP]/tmp_tmp_2"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1756,7 +2954,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863184/test_coverage_report.plasa.json",
-      "[CLEANUP]/tmp_tmp_3"
+      "[CLEANUP]/tmp_tmp_5"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1809,7 +3007,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863185/build-ids.json",
-      "[CLEANUP]/tmp_tmp_4"
+      "[CLEANUP]/tmp_tmp_6"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1834,7 +3032,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_4",
+      "[CLEANUP]/tmp_tmp_6",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1852,11 +3050,11 @@
     },
     "name": "read build-ids.json (2)",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_4@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_4@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_4@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_6@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_6@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_6@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_6@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_6@@@"
     ]
   },
   {
@@ -1869,7 +3067,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863185/fidl_mangled_to_api_mapping.json",
-      "[CLEANUP]/tmp_tmp_5"
+      "[CLEANUP]/tmp_tmp_7"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1896,7 +3094,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863185/test_coverage_report.plasa.json",
-      "[CLEANUP]/tmp_tmp_6"
+      "[CLEANUP]/tmp_tmp_8"
     ],
     "infra_step": true,
     "luci_context": {
@@ -2511,7 +3709,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "move",
-      "[CLEANUP]/tmp_tmp_5",
+      "[CLEANUP]/tmp_tmp_7",
       "[CLEANUP]/coverage/fidl_mangled_to_api_mapping.json"
     ],
     "cwd": "[START_DIR]/fuchsia/out/not-default",
@@ -2538,7 +3736,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "move",
-      "[CLEANUP]/tmp_tmp_6",
+      "[CLEANUP]/tmp_tmp_8",
       "[CLEANUP]/coverage/test_coverage_report.plasa.json"
     ],
     "cwd": "[START_DIR]/fuchsia/out/not-default",
diff --git a/recipes/fuchsia/coverage.expected/default_led.json b/recipes/fuchsia/coverage.expected/default_led.json
index 350ff1d..d06ce39 100644
--- a/recipes/fuchsia/coverage.expected/default_led.json
+++ b/recipes/fuchsia/coverage.expected/default_led.json
@@ -1424,22 +1424,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -2398,7 +3596,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/led/user_example.com/abc123/build-ids.json",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "infra_step": true,
     "luci_context": {
@@ -2423,7 +3621,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1",
+      "[CLEANUP]/tmp_tmp_3",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -2441,11 +3639,11 @@
     },
     "name": "read build-ids.json",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_1@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_1@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_3@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_3@@@"
     ]
   },
   {
@@ -2481,7 +3679,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863185/build-ids.json",
-      "[CLEANUP]/tmp_tmp_2"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "infra_step": true,
     "luci_context": {
@@ -2506,7 +3704,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_2",
+      "[CLEANUP]/tmp_tmp_4",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -2524,11 +3722,11 @@
     },
     "name": "read build-ids.json (2)",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_2@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_2@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_4@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_4@@@"
     ]
   },
   {
diff --git a/recipes/fuchsia/coverage.expected/led_with_child_build_ids.json b/recipes/fuchsia/coverage.expected/led_with_child_build_ids.json
index 36d1ff4..c46d56d 100644
--- a/recipes/fuchsia/coverage.expected/led_with_child_build_ids.json
+++ b/recipes/fuchsia/coverage.expected/led_with_child_build_ids.json
@@ -1005,22 +1005,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1834,7 +3032,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863184/build-ids.json",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1859,7 +3057,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1",
+      "[CLEANUP]/tmp_tmp_3",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1877,11 +3075,11 @@
     },
     "name": "read build-ids.json",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_1@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_1@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_3@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_3@@@"
     ]
   },
   {
@@ -1917,7 +3115,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863185/build-ids.json",
-      "[CLEANUP]/tmp_tmp_2"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1942,7 +3140,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_2",
+      "[CLEANUP]/tmp_tmp_4",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1960,11 +3158,11 @@
     },
     "name": "read build-ids.json (2)",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_2@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_2@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_4@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_4@@@"
     ]
   },
   {
diff --git a/recipes/fuchsia/coverage.expected/no_orchestration_inputs.json b/recipes/fuchsia/coverage.expected/no_orchestration_inputs.json
index d597248..48d6c83 100644
--- a/recipes/fuchsia/coverage.expected/no_orchestration_inputs.json
+++ b/recipes/fuchsia/coverage.expected/no_orchestration_inputs.json
@@ -810,22 +810,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/fuchsia/coverage.expected/no_test_tasks.json b/recipes/fuchsia/coverage.expected/no_test_tasks.json
index a410c97..0d949b3 100644
--- a/recipes/fuchsia/coverage.expected/no_test_tasks.json
+++ b/recipes/fuchsia/coverage.expected/no_test_tasks.json
@@ -798,22 +798,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1515,7 +2713,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863185/build-ids.json",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1540,7 +2738,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1",
+      "[CLEANUP]/tmp_tmp_3",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1558,11 +2756,11 @@
     },
     "name": "read build-ids.json",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_1@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_1@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_3@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_3@@@"
     ]
   },
   {
diff --git a/recipes/fuchsia/coverage.expected/skipped_build.json b/recipes/fuchsia/coverage.expected/skipped_build.json
index c64557c..e44d923 100644
--- a/recipes/fuchsia/coverage.expected/skipped_build.json
+++ b/recipes/fuchsia/coverage.expected/skipped_build.json
@@ -1226,22 +1226,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
diff --git a/recipes/fuchsia/coverage.expected/skipped_testing.json b/recipes/fuchsia/coverage.expected/skipped_testing.json
index 7d1075e..4bc45a6 100644
--- a/recipes/fuchsia/coverage.expected/skipped_testing.json
+++ b/recipes/fuchsia/coverage.expected/skipped_testing.json
@@ -1178,22 +1178,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
diff --git a/recipes/fuchsia/coverage.expected/too_many_unexpected_malformed_tests.json b/recipes/fuchsia/coverage.expected/too_many_unexpected_malformed_tests.json
index 4bf2136..3f8d7dd 100644
--- a/recipes/fuchsia/coverage.expected/too_many_unexpected_malformed_tests.json
+++ b/recipes/fuchsia/coverage.expected/too_many_unexpected_malformed_tests.json
@@ -810,22 +810,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1633,7 +2831,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863184/build-ids.json",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1658,7 +2856,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1",
+      "[CLEANUP]/tmp_tmp_3",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1676,13 +2874,13 @@
     },
     "name": "read build-ids.json",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_1@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id\": \"//expected/valid/test\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id2\": \"//expected/valid/test2\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id3\": \"//expected/valid/test3\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id4\": \"//expected/valid/test4\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_1@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_3@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id\": \"//expected/valid/test\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id2\": \"//expected/valid/test2\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id3\": \"//expected/valid/test3\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id4\": \"//expected/valid/test4\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_3@@@"
     ]
   },
   {
@@ -1718,7 +2916,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863185/build-ids.json",
-      "[CLEANUP]/tmp_tmp_2"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1743,7 +2941,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_2",
+      "[CLEANUP]/tmp_tmp_4",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1761,11 +2959,11 @@
     },
     "name": "read build-ids.json (2)",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_2@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_2@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_4@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_4@@@"
     ]
   },
   {
diff --git a/recipes/fuchsia/coverage.expected/unexpected_malformed_tests.json b/recipes/fuchsia/coverage.expected/unexpected_malformed_tests.json
index a9e7eb9..22eb5eb 100644
--- a/recipes/fuchsia/coverage.expected/unexpected_malformed_tests.json
+++ b/recipes/fuchsia/coverage.expected/unexpected_malformed_tests.json
@@ -810,22 +810,1220 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "write fint context"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure build directory exists"
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init"
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "find tool paths"
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "find all git binaries"
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/coverage.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1633,7 +2831,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863185/build-ids.json",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1658,7 +2856,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1",
+      "[CLEANUP]/tmp_tmp_3",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1676,11 +2874,11 @@
     },
     "name": "read build-ids.json",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_1@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_1@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_1@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_3@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_3@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_3@@@"
     ]
   },
   {
@@ -1716,7 +2914,7 @@
       "GSUtil:software_update_check_period=0",
       "cp",
       "gs://None/builds/8945511751514863184/build-ids.json",
-      "[CLEANUP]/tmp_tmp_2"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "infra_step": true,
     "luci_context": {
@@ -1741,7 +2939,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_2",
+      "[CLEANUP]/tmp_tmp_4",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -1759,11 +2957,11 @@
     },
     "name": "read build-ids.json (2)",
     "~followup_annotations": [
-      "@@@STEP_LOG_LINE@tmp_tmp_2@{@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@  \"valid_id\": \"//expected/valid/test\"@@@",
-      "@@@STEP_LOG_LINE@tmp_tmp_2@}@@@",
-      "@@@STEP_LOG_END@tmp_tmp_2@@@"
+      "@@@STEP_LOG_LINE@tmp_tmp_4@{@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"malformed_id\": \"//src/sys/appmgr/integration_tests/logs:log_tests_bin\",@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@  \"valid_id\": \"//expected/valid/test\"@@@",
+      "@@@STEP_LOG_LINE@tmp_tmp_4@}@@@",
+      "@@@STEP_LOG_END@tmp_tmp_4@@@"
     ]
   },
   {
diff --git a/recipes/fuchsia/determinism_check.expected/deterministic_build.json b/recipes/fuchsia/determinism_check.expected/deterministic_build.json
index f7ba794..5a00ca9 100644
--- a/recipes/fuchsia/determinism_check.expected/deterministic_build.json
+++ b/recipes/fuchsia/determinism_check.expected/deterministic_build.json
@@ -665,22 +665,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1129,12 +2345,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -2347,7 +3608,7 @@
       "/path/to/tmp/json",
       "move",
       "[START_DIR]/fuchsia/out/not-default",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "infra_step": true,
     "luci_context": {
@@ -2362,7 +3623,7 @@
         "hostname": "rdbhost"
       }
     },
-    "name": "build 1.move outdir to [CLEANUP]/tmp_tmp_1",
+    "name": "build 1.move outdir to [CLEANUP]/tmp_tmp_4",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@"
     ]
@@ -2375,7 +3636,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1/not-default/blobs.json",
+      "[CLEANUP]/tmp_tmp_4/not-default/blobs.json",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -2451,22 +3712,992 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_5"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 2.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_6:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_5",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_5"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -2759,12 +4990,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_7"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_7"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -3809,7 +6085,7 @@
       "/path/to/tmp/json",
       "move",
       "[START_DIR]/fuchsia/out/not-default",
-      "[CLEANUP]/tmp_tmp_2"
+      "[CLEANUP]/tmp_tmp_8"
     ],
     "infra_step": true,
     "luci_context": {
@@ -3824,7 +6100,7 @@
         "hostname": "rdbhost"
       }
     },
-    "name": "build 2.move outdir to [CLEANUP]/tmp_tmp_2",
+    "name": "build 2.move outdir to [CLEANUP]/tmp_tmp_8",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@"
     ]
@@ -3837,7 +6113,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_2/not-default/blobs.json",
+      "[CLEANUP]/tmp_tmp_8/not-default/blobs.json",
       "/path/to/tmp/"
     ],
     "infra_step": true,
diff --git a/recipes/fuchsia/determinism_check.expected/different_hashes.json b/recipes/fuchsia/determinism_check.expected/different_hashes.json
index b65bc74..600eef4 100644
--- a/recipes/fuchsia/determinism_check.expected/different_hashes.json
+++ b/recipes/fuchsia/determinism_check.expected/different_hashes.json
@@ -665,22 +665,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1129,12 +2345,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -2347,7 +3608,7 @@
       "/path/to/tmp/json",
       "move",
       "[START_DIR]/fuchsia/out/not-default",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "infra_step": true,
     "luci_context": {
@@ -2362,7 +3623,7 @@
         "hostname": "rdbhost"
       }
     },
-    "name": "build 1.move outdir to [CLEANUP]/tmp_tmp_1",
+    "name": "build 1.move outdir to [CLEANUP]/tmp_tmp_4",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@"
     ]
@@ -2375,7 +3636,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1/not-default/blobs.json",
+      "[CLEANUP]/tmp_tmp_4/not-default/blobs.json",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -2451,22 +3712,992 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_5"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 2.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_6:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_5",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_5"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -2759,12 +4990,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_7"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_7"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -3809,7 +6085,7 @@
       "/path/to/tmp/json",
       "move",
       "[START_DIR]/fuchsia/out/not-default",
-      "[CLEANUP]/tmp_tmp_2"
+      "[CLEANUP]/tmp_tmp_8"
     ],
     "infra_step": true,
     "luci_context": {
@@ -3824,7 +6100,7 @@
         "hostname": "rdbhost"
       }
     },
-    "name": "build 2.move outdir to [CLEANUP]/tmp_tmp_2",
+    "name": "build 2.move outdir to [CLEANUP]/tmp_tmp_8",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@"
     ]
@@ -3837,7 +6113,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_2/not-default/blobs.json",
+      "[CLEANUP]/tmp_tmp_8/not-default/blobs.json",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -3881,7 +6157,7 @@
       "/path/to/tmp/json",
       "copy",
       "{\"/foo/bar\": {\"b1_merkle\": \"hash\", \"b2_merkle\": \"hash2\"}}",
-      "[CLEANUP]/tmp_tmp_3/diffs.json"
+      "[CLEANUP]/tmp_tmp_9/diffs.json"
     ],
     "infra_step": true,
     "luci_context": {
diff --git a/recipes/fuchsia/determinism_check.expected/different_number_of_blobs.json b/recipes/fuchsia/determinism_check.expected/different_number_of_blobs.json
index 9fa7b8e..6ffecd0 100644
--- a/recipes/fuchsia/determinism_check.expected/different_number_of_blobs.json
+++ b/recipes/fuchsia/determinism_check.expected/different_number_of_blobs.json
@@ -665,22 +665,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@4@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 1.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1129,12 +2345,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 1.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -2347,7 +3608,7 @@
       "/path/to/tmp/json",
       "move",
       "[START_DIR]/fuchsia/out/not-default",
-      "[CLEANUP]/tmp_tmp_1"
+      "[CLEANUP]/tmp_tmp_4"
     ],
     "infra_step": true,
     "luci_context": {
@@ -2362,7 +3623,7 @@
         "hostname": "rdbhost"
       }
     },
-    "name": "build 1.move outdir to [CLEANUP]/tmp_tmp_1",
+    "name": "build 1.move outdir to [CLEANUP]/tmp_tmp_4",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@"
     ]
@@ -2375,7 +3636,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_1/not-default/blobs.json",
+      "[CLEANUP]/tmp_tmp_4/not-default/blobs.json",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -2446,22 +3707,992 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_5"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build 2.build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_6:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_5",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_5"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -2754,12 +4985,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_7"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_2",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_2/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build 2.build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/core.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_7"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
@@ -3804,7 +6080,7 @@
       "/path/to/tmp/json",
       "move",
       "[START_DIR]/fuchsia/out/not-default",
-      "[CLEANUP]/tmp_tmp_2"
+      "[CLEANUP]/tmp_tmp_8"
     ],
     "infra_step": true,
     "luci_context": {
@@ -3819,7 +6095,7 @@
         "hostname": "rdbhost"
       }
     },
-    "name": "build 2.move outdir to [CLEANUP]/tmp_tmp_2",
+    "name": "build 2.move outdir to [CLEANUP]/tmp_tmp_8",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@"
     ]
@@ -3832,7 +6108,7 @@
       "--json-output",
       "/path/to/tmp/json",
       "copy",
-      "[CLEANUP]/tmp_tmp_2/not-default/blobs.json",
+      "[CLEANUP]/tmp_tmp_8/not-default/blobs.json",
       "/path/to/tmp/"
     ],
     "infra_step": true,
@@ -3876,7 +6152,7 @@
       "/path/to/tmp/json",
       "copy",
       "{\"/foo/bar\": {\"b1_merkle\": \"not found\", \"b2_merkle\": \"hash\"}}",
-      "[CLEANUP]/tmp_tmp_3/diffs.json"
+      "[CLEANUP]/tmp_tmp_9/diffs.json"
     ],
     "infra_step": true,
     "luci_context": {
diff --git a/recipes/prebuilt_host_tool.expected/ci.json b/recipes/prebuilt_host_tool.expected/ci.json
index 9a23224..880c0ec 100644
--- a/recipes/prebuilt_host_tool.expected/ci.json
+++ b/recipes/prebuilt_host_tool.expected/ci.json
@@ -599,22 +599,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/host-prebuilts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:ci"
@@ -1063,12 +2279,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/host-prebuilts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/prebuilt_host_tool.expected/cq.json b/recipes/prebuilt_host_tool.expected/cq.json
index e7fc6ec..baad09e 100644
--- a/recipes/prebuilt_host_tool.expected/cq.json
+++ b/recipes/prebuilt_host_tool.expected/cq.json
@@ -1147,22 +1147,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/host-prebuilts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "project:try"
@@ -1617,12 +2833,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "project:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/host-prebuilts.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"integration/foo.cc\"\n}\nchanged_files {\n  path: \"integration/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/release/platform_version_roller.expected/roll.json b/recipes/release/platform_version_roller.expected/roll.json
index 973223f..7c592a1 100644
--- a/recipes/release/platform_version_roller.expected/roll.json
+++ b/recipes/release/platform_version_roller.expected/roll.json
@@ -781,22 +781,734 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/platform-version-roller.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "name": "gen.gn gen",
     "~followup_annotations": [
       "@@@STEP_NEST_LEVEL@1@@@",
diff --git a/recipes/sdk.expected/cq_with_attributes.json b/recipes/sdk.expected/cq_with_attributes.json
index 1c12d0c..19eec4f 100644
--- a/recipes/sdk.expected/cq_with_attributes.json
+++ b/recipes/sdk.expected/cq_with_attributes.json
@@ -1626,22 +1626,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/sdk.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
diff --git a/recipes/sdk.expected/explicit_tryjobs.json b/recipes/sdk.expected/explicit_tryjobs.json
index 78c3211..d0a9e29 100644
--- a/recipes/sdk.expected/explicit_tryjobs.json
+++ b/recipes/sdk.expected/explicit_tryjobs.json
@@ -1204,22 +1204,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/sdk.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/sdk.expected/explicit_tryjobs_without_cl.json b/recipes/sdk.expected/explicit_tryjobs_without_cl.json
index db46724..621eaee 100644
--- a/recipes/sdk.expected/explicit_tryjobs_without_cl.json
+++ b/recipes/sdk.expected/explicit_tryjobs_without_cl.json
@@ -1204,22 +1204,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/sdk.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/sdk.expected/external_testing.json b/recipes/sdk.expected/external_testing.json
index 86eff51..f84b8f2 100644
--- a/recipes/sdk.expected/external_testing.json
+++ b/recipes/sdk.expected/external_testing.json
@@ -1204,22 +1204,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/sdk.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/sdk.expected/fxt_tests.json b/recipes/sdk.expected/fxt_tests.json
index b9c04e8..62a3adf 100644
--- a/recipes/sdk.expected/fxt_tests.json
+++ b/recipes/sdk.expected/fxt_tests.json
@@ -1204,22 +1204,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/sdk.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/sdk.expected/package_overrides.json b/recipes/sdk.expected/package_overrides.json
index a110207..0af6172 100644
--- a/recipes/sdk.expected/package_overrides.json
+++ b/recipes/sdk.expected/package_overrides.json
@@ -1348,22 +1348,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/sdk.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/sdk.expected/release_ci.json b/recipes/sdk.expected/release_ci.json
index c78bc27..c24abdc 100644
--- a/recipes/sdk.expected/release_ci.json
+++ b/recipes/sdk.expected/release_ci.json
@@ -1446,22 +1446,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/sdk.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/sdk.expected/release_ci_no_update_ref.json b/recipes/sdk.expected/release_ci_no_update_ref.json
index 62bd507..df4beaf 100644
--- a/recipes/sdk.expected/release_ci_no_update_ref.json
+++ b/recipes/sdk.expected/release_ci_no_update_ref.json
@@ -1446,22 +1446,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/sdk.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/sdk.expected/skip_testing_and_gn_sdk.json b/recipes/sdk.expected/skip_testing_and_gn_sdk.json
index be5c099..279f416 100644
--- a/recipes/sdk.expected/skip_testing_and_gn_sdk.json
+++ b/recipes/sdk.expected/skip_testing_and_gn_sdk.json
@@ -1204,22 +1204,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "gen.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "gen.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/sdk.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
diff --git a/recipes/static_checks.expected/default_ci.json b/recipes/static_checks.expected/default_ci.json
index acc81fa..af5b83c 100644
--- a/recipes/static_checks.expected/default_ci.json
+++ b/recipes/static_checks.expected/default_ci.json
@@ -673,22 +673,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:ci"
@@ -1137,12 +2353,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:ci"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/static_checks.expected/default_cq.json b/recipes/static_checks.expected/default_cq.json
index acbe578..f668251 100644
--- a/recipes/static_checks.expected/default_cq.json
+++ b/recipes/static_checks.expected/default_cq.json
@@ -1067,22 +1067,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1537,12 +2753,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/static_checks.expected/failed_build.json b/recipes/static_checks.expected/failed_build.json
index fd5983e..6aad4dd 100644
--- a/recipes/static_checks.expected/failed_build.json
+++ b/recipes/static_checks.expected/failed_build.json
@@ -1068,22 +1068,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1538,12 +2754,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/static_checks.expected/failed_doc_check.json b/recipes/static_checks.expected/failed_doc_check.json
index 83a5d37..2d2d9ee 100644
--- a/recipes/static_checks.expected/failed_doc_check.json
+++ b/recipes/static_checks.expected/failed_doc_check.json
@@ -1067,22 +1067,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1537,12 +2753,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/static_checks.expected/failed_gn_format.json b/recipes/static_checks.expected/failed_gn_format.json
index 9b4d1aa..1b24b68 100644
--- a/recipes/static_checks.expected/failed_gn_format.json
+++ b/recipes/static_checks.expected/failed_gn_format.json
@@ -1067,22 +1067,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1537,12 +2753,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/static_checks.expected/failed_licenses_check.json b/recipes/static_checks.expected/failed_licenses_check.json
index 8e2e49b..265ecc0 100644
--- a/recipes/static_checks.expected/failed_licenses_check.json
+++ b/recipes/static_checks.expected/failed_licenses_check.json
@@ -1067,22 +1067,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1537,12 +2753,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/specs/static-checks.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/tricium/tricium.expected/attribute_disable.json b/recipes/tricium/tricium.expected/attribute_disable.json
index 0196f2b..35e455a 100644
--- a/recipes/tricium/tricium.expected/attribute_disable.json
+++ b/recipes/tricium/tricium.expected/attribute_disable.json
@@ -1155,22 +1155,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1625,12 +2841,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/tricium/tricium.expected/default.json b/recipes/tricium/tricium.expected/default.json
index ec26b6a..544f552 100644
--- a/recipes/tricium/tricium.expected/default.json
+++ b/recipes/tricium/tricium.expected/default.json
@@ -1335,22 +1335,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[CACHE]/incremental\"\nbuild_dir: \"[CACHE]/incremental/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[CACHE]/incremental/out/not-default"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[CACHE]/incremental",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CACHE]/incremental",
+      "--bindmount",
+      "[CACHE]/incremental/out/not-default",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[CACHE]/incremental/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[CACHE]/incremental\"\nbuild_dir: \"[CACHE]/incremental/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[CACHE]/incremental",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1805,12 +3021,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[CACHE]/incremental\"\nbuild_dir: \"[CACHE]/incremental/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[CACHE]/incremental/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[CACHE]/incremental\"\nbuild_dir: \"[CACHE]/incremental/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",
diff --git a/recipes/tricium/tricium.expected/one_analysis_fails.json b/recipes/tricium/tricium.expected/one_analysis_fails.json
index 736ab65..ce591aa 100644
--- a/recipes/tricium/tricium.expected/one_analysis_fails.json
+++ b/recipes/tricium/tricium.expected/one_analysis_fails.json
@@ -1155,22 +1155,1238 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_1"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/fuchsia/out/not-default"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure build directory exists",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/nsjail/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/nsjail\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure nsjail.install path/to/nsjail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/nsjail version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure nsjail.install path/to/nsjail.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/nsjail\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "RECIPE_MODULE[fuchsia::nsjail]/resources/dumb_init/tool_manifest.json",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.read manifest",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@{@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"path\": \"path/to/dumb_init\",@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@  \"version\": \"version:pinned-version\"@@@",
+      "@@@STEP_LOG_LINE@tool_manifest.json@}@@@",
+      "@@@STEP_LOG_END@tool_manifest.json@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.ensure dumb_init.install path/to/dumb_init",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "ensure-directory",
+      "--mode",
+      "0777",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure package directory",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "cipd",
+      "ensure",
+      "-root",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version",
+      "-ensure-file",
+      "path/to/dumb_init version:pinned-version",
+      "-max-threads",
+      "0",
+      "-json-output",
+      "/path/to/tmp/json"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.ensure dumb_init.install path/to/dumb_init.ensure_installed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@3@@@",
+      "@@@STEP_LOG_LINE@json.output@{@@@",
+      "@@@STEP_LOG_LINE@json.output@  \"result\": {@@@",
+      "@@@STEP_LOG_LINE@json.output@    \"\": [@@@",
+      "@@@STEP_LOG_LINE@json.output@      {@@@",
+      "@@@STEP_LOG_LINE@json.output@        \"instance_id\": \"resolved-instance_id-of-version:pinned-v\", @@@",
+      "@@@STEP_LOG_LINE@json.output@        \"package\": \"path/to/dumb_init\"@@@",
+      "@@@STEP_LOG_LINE@json.output@      }@@@",
+      "@@@STEP_LOG_LINE@json.output@    ]@@@",
+      "@@@STEP_LOG_LINE@json.output@  }@@@",
+      "@@@STEP_LOG_LINE@json.output@}@@@",
+      "@@@STEP_LOG_END@json.output@@@"
+    ]
+  },
+  {
+    "cmd": [],
+    "name": "build.find tool paths",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "awk"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of awk",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "basename"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of basename",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cat"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cat",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "chmod"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of chmod",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cmp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cmp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "comm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of comm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "cut"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of cut",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "diff"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of diff",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "dirname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of dirname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "egrep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of egrep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "env"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of env",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "expr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of expr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "find"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of find",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "grep"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of grep",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "gzip"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of gzip",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "head"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of head",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ldd"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ldd",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "ls"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of ls",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mkdir"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mkdir",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "mktemp"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of mktemp",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "readlink"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of readlink",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "rm"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of rm",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sed"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sed",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "sort"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of sort",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tail"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tail",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tar"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tar",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tee"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tee",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "touch"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of touch",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "tr"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of tr",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "uname"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of uname",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "wc"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of wc",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "which"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find tool paths.find absolute path of which",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@2@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "which",
+      "-a",
+      "git"
+    ],
+    "cwd": "[START_DIR]/fuchsia",
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.find all git binaries",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
+      "[START_DIR]/cipd_tool/path/to/nsjail/version%3Apinned-version/nsjail",
+      "--disable_clone_newipc",
+      "--disable_clone_newuts",
+      "--disable_clone_newcgroup",
+      "--disable_rlimits",
+      "--time_limit",
+      "43200",
+      "--bindmount",
+      "[CLEANUP]/tmp_tmp_2:/tmp",
+      "--bindmount_ro",
+      "/bin/bash",
+      "--bindmount",
+      "/dev/null",
+      "--bindmount",
+      "/dev/urandom",
+      "--bindmount_ro",
+      "/dev/zero",
+      "--bindmount_ro",
+      "/lib",
+      "--bindmount_ro",
+      "/lib64",
+      "--bindmount_ro",
+      "/usr/bin/awk",
+      "--bindmount_ro",
+      "/usr/bin/basename",
+      "--bindmount_ro",
+      "/usr/bin/cat",
+      "--bindmount_ro",
+      "/usr/bin/chmod",
+      "--bindmount_ro",
+      "/usr/bin/cmp",
+      "--bindmount_ro",
+      "/usr/bin/comm",
+      "--bindmount_ro",
+      "/usr/bin/cp",
+      "--bindmount_ro",
+      "/usr/bin/cut",
+      "--bindmount_ro",
+      "/usr/bin/diff",
+      "--bindmount_ro",
+      "/usr/bin/dirname",
+      "--bindmount_ro",
+      "/usr/bin/egrep",
+      "--bindmount_ro",
+      "/usr/bin/env",
+      "--bindmount_ro",
+      "/usr/bin/expr",
+      "--bindmount_ro",
+      "/usr/bin/find",
+      "--bindmount_ro",
+      "/usr/bin/grep",
+      "--bindmount_ro",
+      "/usr/bin/gzip",
+      "--bindmount_ro",
+      "/usr/bin/head",
+      "--bindmount_ro",
+      "/usr/bin/ldd",
+      "--bindmount_ro",
+      "/usr/bin/ls",
+      "--bindmount_ro",
+      "/usr/bin/mkdir",
+      "--bindmount_ro",
+      "/usr/bin/mktemp",
+      "--bindmount_ro",
+      "/usr/bin/openssl",
+      "--bindmount_ro",
+      "/usr/bin/readlink",
+      "--bindmount_ro",
+      "/usr/bin/rm",
+      "--bindmount_ro",
+      "/usr/bin/sed",
+      "--bindmount_ro",
+      "/usr/bin/sort",
+      "--bindmount_ro",
+      "/usr/bin/tail",
+      "--bindmount_ro",
+      "/usr/bin/tar",
+      "--bindmount_ro",
+      "/usr/bin/tee",
+      "--bindmount_ro",
+      "/usr/bin/touch",
+      "--bindmount_ro",
+      "/usr/bin/tr",
+      "--bindmount_ro",
+      "/usr/bin/uname",
+      "--bindmount_ro",
+      "/usr/bin/wc",
+      "--bindmount_ro",
+      "/usr/bin/which",
+      "--bindmount",
+      "[CACHE]",
+      "--bindmount",
+      "[CLEANUP]/fint_artifacts_tmp_1",
+      "--bindmount_ro",
+      "[CLEANUP]/fint_tmp_1/fint",
+      "--bindmount_ro",
+      "[CLEANUP]/tmp_tmp_1",
+      "--bindmount_ro",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
+      "--bindmount",
+      "[START_DIR]/fuchsia",
+      "--bindmount",
+      "[START_DIR]/fuchsia/out/not-default",
+      "--symlink",
+      "/bin/bash:/bin/sh",
+      "--symlink",
+      "/proc/self/fd:/dev/fd",
+      "--symlink",
+      "/proc/self/fd/1:/dev/stdout",
+      "--env",
+      "HOME=/tmp",
+      "--env",
+      "PATH=/usr/bin:/bin",
+      "--env",
+      "TMPDIR=/tmp",
+      "--env",
+      "XDG_CACHE_HOME=/tmp",
+      "--env",
+      "XDG_CONFIG_HOME=/tmp",
+      "--env",
+      "XDG_DATA_HOME=/tmp",
+      "--env",
+      "XDG_HOME=/tmp",
+      "--env",
+      "XDG_STATE_HOME=/tmp",
+      "--",
+      "[START_DIR]/cipd_tool/path/to/dumb_init/version%3Apinned-version/dumb_init",
       "[CLEANUP]/fint_tmp_1/fint",
       "set",
       "-static",
       "[START_DIR]/fuchsia/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_1"
     ],
     "cwd": "[START_DIR]/fuchsia",
-    "env": {
-      "HOME": "[CLEANUP]",
-      "XDG_CACHE_HOME": "[CLEANUP]",
-      "XDG_CONFIG_HOME": "[CLEANUP]",
-      "XDG_DATA_HOME": "[CLEANUP]",
-      "XDG_HOME": "[CLEANUP]",
-      "XDG_STATE_HOME": "[CLEANUP]"
-    },
     "luci_context": {
       "realm": {
         "name": "fuchsia:try"
@@ -1625,12 +2841,57 @@
   },
   {
     "cmd": [
+      "vpython3",
+      "-u",
+      "RECIPE_MODULE[recipe_engine::file]/resources/fileutil.py",
+      "--json-output",
+      "/path/to/tmp/json",
+      "copy",
+      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n",
+      "[CLEANUP]/tmp_tmp_3"
+    ],
+    "env": {
+      "GOMA_TMP_DIR": "[CLEANUP]/goma",
+      "GOMA_USE_LOCAL": "False",
+      "RBE_deps_cache_dir": "[CACHE]/rbe/deps",
+      "RBE_instance": "fake_rbe_instance",
+      "RBE_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_log_format": "reducedtext",
+      "RBE_output_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_platform": "fake_rbe_platform",
+      "RBE_proxy_log_dir": "[CLEANUP]/rbe_tmp_1",
+      "RBE_server_address": "unix://[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_service": "remotebuildexecution.googleapis.com:443",
+      "RBE_socket_path": "[CLEANUP]/rbe_tmp_1/reproxy.sock",
+      "RBE_use_application_default_credentials": "False",
+      "RBE_use_gce_credentials": "True"
+    },
+    "infra_step": true,
+    "luci_context": {
+      "realm": {
+        "name": "fuchsia:try"
+      },
+      "resultdb": {
+        "current_invocation": {
+          "name": "invocations/build:8945511751514863184",
+          "update_token": "token"
+        },
+        "hostname": "rdbhost"
+      }
+    },
+    "name": "build.write fint context (2)",
+    "~followup_annotations": [
+      "@@@STEP_NEST_LEVEL@1@@@"
+    ]
+  },
+  {
+    "cmd": [
       "[CLEANUP]/fint_tmp_1/fint",
       "build",
       "-static",
       "[START_DIR]/fuchsia/fint_params/tricium.textproto",
       "-context",
-      "checkout_dir: \"[START_DIR]/fuchsia\"\nbuild_dir: \"[START_DIR]/fuchsia/out/not-default\"\nartifact_dir: \"[CLEANUP]/fint_artifacts_tmp_1\"\nchanged_files {\n  path: \"fuchsia/foo.cc\"\n}\nchanged_files {\n  path: \"fuchsia/bar.cc\"\n}\ncache_dir: \"[CACHE]\"\ngoma_job_count: 80\n"
+      "[CLEANUP]/tmp_tmp_3"
     ],
     "env": {
       "GOMA_TMP_DIR": "[CLEANUP]/goma",