diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 18bc5b08..a142dc9f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -84,13 +84,13 @@ jobs:
     steps:
       - name: Install requirements (ubuntu/debian)
         run: |
-          set -ex
+          set -euxo pipefail
           apt-get -o Acquire::Retries=10 -qq update
           apt-get -o Acquire::Retries=10 -qq -o Dpkg::Use-Pty=0 install -y --no-install-recommends cargo
         if: startsWith(matrix.container, 'ubuntu') || startsWith(matrix.container, 'debian')
       - name: Install requirements (fedora/rockylinux)
         run: |
-          set -ex
+          set -euxo pipefail
           dnf=dnf
           if ! type -P dnf &>/dev/null; then
             dnf=microdnf
@@ -100,13 +100,13 @@ jobs:
         if: startsWith(matrix.container, 'fedora') || startsWith(matrix.container, 'rockylinux')
       - name: Install requirements (centos)
         run: |
-          set -ex
+          set -euxo pipefail
           curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain stable
           echo "$HOME/.cargo/bin" >>"${GITHUB_PATH}"
         if: startsWith(matrix.container, 'centos')
       - name: Install requirements (alpine)
         run: |
-          set -ex
+          set -eux
           apk add bash cargo
         shell: sh
         if: startsWith(matrix.container, 'alpine')