V8.13.392.2025.11.07

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

ciss_live_builder.sh

@@ -91,27 +91,28 @@ declare -grx  VAR_WORKDIR="$(dirname "${VAR_SETUP_FULL}")"               # '/roo
   exit 1
 }
 
-### SOURCING MUST SET EARLY VARIABLES, GUARD_SOURCING(), CHECK_GIT().
+### SOURCING MUST SET EARLY VARIABLES, GUARD_SOURCING().
 . ./var/early.var.sh
 . ./lib/lib_guard_sourcing.sh
 . ./lib/lib_source_guard.sh
 
+### SECURING ENVIRONMENT.
+source_guard "./var/bash.var.sh"
+
 ### CHECK FOR CONTACT, HELP, VERSION STRING, AND XTRACE DEBUG.
 for arg in "$@"; do case "${arg,,}" in -c|--contact) . ./lib/lib_contact.sh   ; contact; exit 0;; esac; done
 for arg in "$@"; do case "${arg,,}" in -h|--help)    . ./lib/lib_usage.sh     ; usage  ; exit 0;; esac; done
 for arg in "$@"; do case "${arg,,}" in -v|--version) . ./lib/lib_version.sh   ; version; exit 0;; esac; done
 for arg in "$@"; do case "${arg,,}" in -d|--debug)   . ./meta_sources_debug.sh; debugger "${@}";; esac; done
 
-### CHECKING REQUIRED PACKAGES.
-check_pkgs
+### SECURING SECRETS ARTIFACTS.
+find "${VAR_TMP_SECRET}" -type f -exec chmod 0400 {} +
 
 ### ALL CHECKS DONE. READY TO START THE SCRIPT.
-find "${VAR_TMP_SECRET}" -type f -exec chmod 0400 {} +
 declare -grx VAR_SETUP="true"
 
 ### SOURCING VARIABLES.
 [[ "${VAR_SETUP}" == true ]] && {
-  source_guard "./var/bash.var.sh"
   source_guard "./var/color.var.sh"
   source_guard "./var/global.var.sh"
 }
@@ -154,6 +155,9 @@ declare -grx VAR_SETUP="true"
   source_guard "./lib/lib_usage.sh"
 }
 
+### CHECKING REQUIRED PACKAGES.
+check_pkgs
+
 ### ADVISORY LOCK.
 exec 127>/var/lock/ciss_live_builder.lock || {
   printf "\e[91m❌ Cannot open lockfile for writing! Bye... \e[0m\n" >&2