V8.03.148.2025.06.02

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

.gitea/workflows/render-md-to-html.yaml

@@ -30,9 +30,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Preparing SSH Setup, SSH Deploy Key, Known Hosts, .config.
+      - name: ⚙️ Preparing SSH Setup, SSH Deploy Key, Known Hosts, .config.
         shell: bash
         run: |
+          set -euo pipefail
           rm -rf ~/.ssh && mkdir -m700 ~/.ssh
 
           ### Private Key
@@ -61,18 +62,21 @@ jobs:
           ### GITHUB_REF_NAME contains the branch name from the push event.
           GITHUB_REF_NAME: ${{ github.ref_name }}
         run: |
+          set -euo pipefail
           git clone --branch "${GITHUB_REF_NAME}" ssh://git@git.coresecret.dev:42842/msw/CISS.debian.live.builder.git .
           git fetch --unshallow || echo "Nothing to fetch - already full clone."
 
       - name: 🛠️ Cleaning the workspace.
         shell: bash
         run: |
+          set -euo pipefail
           git reset --hard
           git clean -fd
 
       - name: ⚙️ Importing the 'CI PGP DEPLOY ONLY' key.
         shell: bash
         run: |
+          set -euo pipefail
           ### GPG-Home relative to the Runner Workspace to avoid changing global files.
           export GNUPGHOME="$(pwd)/.gnupg"
           mkdir -m 700 "${GNUPGHOME}"
@@ -85,6 +89,7 @@ jobs:
       - name: ⚙️ Configuring Git for signed CI/DEPLOY commits.
         shell: bash
         run: |
+          set -euo pipefail
           export GNUPGHOME="$(pwd)/.gnupg"
           git config user.name "Marc S. Weidner BOT"
           git config user.email "msw+bot@coresecret.dev"
@@ -95,12 +100,14 @@ jobs:
       - name: ⚙️ Convert APT sources to HTTPS.
         shell: bash
         run: |
+          set -euo pipefail
           sed -i 's|http://\(archive\.ubuntu\.com\|security\.ubuntu\.com\)|https://\1|g' /etc/apt/sources.list
           sed -i 's|http://\(archive\.ubuntu\.com\|security\.ubuntu\.com\)|https://\1|g' /etc/apt/sources.list.d/*.list || true
 
-      - name: 🛠️Install Pandoc & Dependencies.
+      - name: 🛠️ Install Pandoc & Dependencies.
         shell: bash
         run: |
+          set -euo pipefail
           sudo apt-get update
           sudo apt-get install -y pandoc
 
@@ -112,6 +119,7 @@ jobs:
       #- name: Render *.md to full standalone HTML.
       #  shell: bash
       #  run: |
+      #    set -euo pipefail
       #    find . \( -path "*/.*" -prune \) -o -type f -name "*.md" -print  | while read file; do
       #      out=$(basename "${file%.md}.html")
       #      pandoc -s "${file}" \
@@ -129,6 +137,7 @@ jobs:
       - name: 📥 Extract HTML fragment for Gitea for *.md.
         shell: bash
         run: |
+          set -euo pipefail
           find . \( -path "*/.*" -prune \) -o -type f -name "README.md" -print | while read file; do
             out="${file%.md}.html"
             pandoc "${file}" \