diff --git a/scripts/cleanup-files b/scripts/cleanup-files
index 2d29442..b51ad65 100755
--- a/scripts/cleanup-files
+++ b/scripts/cleanup-files
@@ -1,4 +1,6 @@
 #!/usr/bin/env bash
+set -x
+set -euo pipefail
 
 for f in passwd group shadow gshadow subuid subgid; do
     rm /etc/${f} /etc/${f}-
diff --git a/scripts/generate-versions b/scripts/generate-versions
index b2a31bc..c713c0a 100755
--- a/scripts/generate-versions
+++ b/scripts/generate-versions
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+set -x
 
 set -eo pipefail  # -u and mamba don't play well: ADDR2LINE: unbound variable
 
diff --git a/scripts/install-base-packages b/scripts/install-base-packages
index 28d4a1e..b77e57e 100755
--- a/scripts/install-base-packages
+++ b/scripts/install-base-packages
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+set -x
 
 # This script updates packages in the base Docker image that's used by both
 # the build and runtime images, and gives us a place to install additional
diff --git a/scripts/install-compat b/scripts/install-compat
index 7ee3914..67d6ec2 100755
--- a/scripts/install-compat
+++ b/scripts/install-compat
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+set -x
 #
 # This can be pretty minimal.  Effectively we just want to ensure that
 # files once found in the old-style layout still exist, but point to their
diff --git a/scripts/install-dependency-packages b/scripts/install-dependency-packages
index 4f9f33d..0e05e71 100755
--- a/scripts/install-dependency-packages
+++ b/scripts/install-dependency-packages
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+set -x
 
 # This script installs additional packages used by the dependency image but
 # not needed by the runtime image, such as additional packages required to
diff --git a/scripts/install-dm-stack b/scripts/install-dm-stack
index 6ce7bf8..7872987 100755
--- a/scripts/install-dm-stack
+++ b/scripts/install-dm-stack
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+set -x
 
 # -u makes lsstinstall fail, via mamba ADDR2LINE: unbound variable.
 set -eo pipefail
diff --git a/scripts/install-jupyterlab b/scripts/install-jupyterlab
index 0bd86f3..a46440a 100755
--- a/scripts/install-jupyterlab
+++ b/scripts/install-jupyterlab
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+set -x
 set -euo pipefail
 
 # Install Jupyterlab and its runtime extensions under the system python
diff --git a/scripts/install-notebooks b/scripts/install-notebooks
index 67a0292..3f317d7 100755
--- a/scripts/install-notebooks
+++ b/scripts/install-notebooks
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+set -x
 set -euo pipefail
 
 # Check out notebooks-at-build-time
diff --git a/scripts/install-rsp-user b/scripts/install-rsp-user
index b03ce0e..c85765d 100755
--- a/scripts/install-rsp-user
+++ b/scripts/install-rsp-user
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+set -x
 # -u causes failure in activate: ADDR2LINE: unbound variable
 set -eo pipefail
 stackdir=/opt/lsst/software/stack
diff --git a/scripts/install-system-files b/scripts/install-system-files
index 55f6818..4357ad6 100755
--- a/scripts/install-system-files
+++ b/scripts/install-system-files
@@ -1,4 +1,6 @@
 #!/usr/bin/env bash
+set -x
+set -euo pipefail
 
 # This is for Fritz, and my nefarious plan to make the "te" in "Jupyter" TECO.
 # We switched from TECOC to Paul Koning's Python implementation because it
diff --git a/scripts/make-user b/scripts/make-user
index 19ae60c..b139bcc 100755
--- a/scripts/make-user
+++ b/scripts/make-user
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+set -x
 set -euo pipefail
 
 # Create user and home directory.