V8.13.512.2025.11.26

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/includes.chroot/etc/initramfs-tools/scripts/init-bottom/0042_ciss_post_decrypt_attest.sh

@@ -77,10 +77,11 @@ for _mp in /run/live/rootfs /run/live/rootfs.squashfs /run/live/overlay /root ;
 done
 
 if [ -z "${ROOTMP}" ]; then
+
   log_er "No decrypted rootfs mount found."
   sleep 8
-  # TODO: Remove debug mode
-  # panic "[FATAL] No decrypted rootfs mount found."
+  panic "[FATAL] No decrypted rootfs mount found."
+
 fi
 
 log_ok "Decrypted rootfs at: [${ROOTMP}]"
@@ -106,8 +107,7 @@ else
 
   log_er "Signature FPR mismatch: got: [${_CDLB_SIG_FILE_FPR}] expected: [${CDLB_EXP_FPR}]"
   sleep 8
-  # TODO: Remove debug mode
-  # panic "[FATAL] Signature FPR mismatch: got: [${_CDLB_SIG_FILE_FPR}] expected: [${CDLB_EXP_FPR}]."
+  panic "[FATAL] Signature FPR mismatch: got: [${_CDLB_SIG_FILE_FPR}] expected: [${CDLB_EXP_FPR}]."
 
 fi
 
@@ -126,8 +126,7 @@ if [ -e "${MAP_DEV}" ]; then
 
     log_er "Top layer is NOT 'crypt'."
     sleep 8
-    # TODO: Remove debug mode
-    # panic "[FATAL] Top layer is NOT 'crypt'."
+    panic "[FATAL] Top layer is NOT 'crypt'."
 
   fi
 
@@ -139,8 +138,7 @@ if [ -e "${MAP_DEV}" ]; then
 
     log_er "Cipher does not look like AES-XTS."
     sleep 8
-    # TODO: Remove debug mode
-    # panic "[FATAL] Cipher does not look like AES-XTS."
+    panic "[FATAL] Cipher does not look like AES-XTS."
 
   fi